Hello, I am on the latest PSU version and I am noticing odd behaviour when I run my Invoke-RestMethod with the -UseDefaultCredentials switch in that it will execute the API endpoint for any user. That’s users that are not even assigned to the Role that has been granted. When an API is called this way I don’t see the Roles.ps1 being executed at the backend. To work around the problem I created an Identity in PSU and assigned the identity to a Role. I then granted this Identity a token and assigned only this Role to the API. In the API code is a check that it is this identity and if not the code exits. Have I set it up incorrectly or is the workaround the only viable way to circumvent this issue? Cheers Carl.